Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/p4wE5SxW-XZshbk5A2aEFfXMwJU.roa
File: p4wE5SxW-XZshbk5A2aEFfXMwJU.roa (raw, json)
Hash identifier: pUZr95wkgmJ1lmFsD3jIhD2T++1LJTW2+ZGv2pLLbkA=
Subject key identifier: A7:8C:04:E5:2C:56:F9:76:6C:85:B9:39:03:66:84:15:F5:CC:C0:95
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C457429CE8C577827B4F394C772799C56
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/p4wE5SxW-XZshbk5A2aEFfXMwJU.roa
Signing time: Thu 07 Dec 2023 18:04:49 +0000
ROA not before: Thu 07 Dec 2023 18:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:4573:8cfc/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:45:74:29:ce:8c:57:78:27:b4:f3:94:c7:72:79:9c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 7 18:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a78c04e52c56f9766c85b93903668415f5ccc095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3c:d7:c1:ca:26:41:44:02:1b:07:0a:69:48:
48:bf:26:5c:a0:8d:b3:e6:37:f4:62:7e:a4:d3:7d:
3d:bb:93:0f:0a:33:aa:90:5f:16:de:a5:9b:16:bb:
8c:79:c6:3c:90:af:1e:3e:69:d3:0d:2b:f6:89:01:
9a:be:e6:0e:76:7f:98:b2:ef:b9:7f:93:a4:dd:ff:
e1:1b:c9:98:0e:b4:99:db:6c:0b:7e:21:74:89:81:
d6:aa:d6:35:2f:e8:1e:3b:d4:80:c8:d6:e6:11:48:
b7:0e:69:e4:4f:69:ce:ef:f0:84:13:a1:e8:ec:64:
e2:c6:c7:87:9c:d7:9a:d0:2a:7b:ab:90:04:79:88:
66:92:c3:01:7c:1b:88:c3:ba:f1:2a:05:1f:ce:0b:
67:73:92:65:2b:20:d2:31:55:37:72:74:b7:e8:61:
d8:77:ff:f2:a9:9f:16:ae:d9:c7:5e:bf:6b:75:ef:
f6:d1:9a:8f:41:d2:cc:de:10:cf:fd:1d:7e:b4:57:
1c:10:64:8c:69:92:90:d6:21:bb:f5:4b:b5:28:ac:
1d:f4:19:ff:9a:53:9e:ac:10:10:ae:b7:44:1a:e0:
cb:d7:18:98:23:af:6e:b8:ff:ed:17:e2:8a:d1:f5:
d8:7e:93:f2:f4:9e:b9:e1:84:ae:50:b8:3d:e8:bb:
4c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8C:04:E5:2C:56:F9:76:6C:85:B9:39:03:66:84:15:F5:CC:C0:95
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/p4wE5SxW-XZshbk5A2aEFfXMwJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b8:44:2b:e5:73:bb:63:98:49:66:b8:68:50:c7:33:53:96:2a:
f6:16:2f:3f:72:5c:68:19:a3:33:0e:24:2e:bf:91:7f:7f:c8:
7c:75:69:8c:67:ef:a2:49:fc:cf:47:5f:f1:28:05:6c:de:c9:
55:87:e8:ee:68:a4:b7:59:a3:96:a5:37:a4:b1:64:98:f5:d3:
29:1a:5a:9f:15:96:6c:19:a4:a9:98:eb:db:bc:58:01:f9:fb:
cd:4b:02:af:c1:c3:b1:39:08:2c:3e:4b:59:b5:4c:d3:49:f6:
04:52:ca:50:a7:4b:6c:79:41:67:08:81:3b:d2:68:bd:ff:8e:
58:20:14:17:ff:b0:70:12:c4:e1:71:c8:63:d3:ef:56:ce:eb:
e2:51:b9:3c:69:cd:e3:42:9c:00:57:57:05:25:24:db:22:3a:
39:ff:ec:14:93:ec:ef:b4:c9:56:b4:96:4c:84:0f:3f:48:08:
d8:11:5c:5d:d0:6b:4c:79:da:f9:f1:ac:2f:70:77:af:7b:4a:
a4:80:38:ad:73:ab:ea:3f:3a:97:2b:5c:df:3c:9c:9f:af:58:
61:3f:da:97:96:db:67:61:38:82:10:05:53:d1:8f:ab:bd:c2:
f9:6a:70:3c:f6:25:94:52:e0:92:a6:b8:64:19:5e:55:cf:50:
05:aa:1e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:32:31 2025 by rpki-client